Skip to content
Sprint projectSep 1, 2024

Jailbreaking general purpose robots

Axel Backlund, Lukas Petersson · Team Luax Labs

Submitted to Hackathon for Technical AI Safety Startups. Sprint projects are early-stage work by participants, not Apart Research publications.

Read the report

Report: Jailbreaking general purpose robots

Share

We show that state of the art LLMs can be jailbroken by adversarial multimodal inputs, and that this can lead to dangerous scenarios if these LLMs are used as planners in robotics. We propose finetuning small multimodal language models to act as guardrails in the robot's planning pipeline.

Reviews

Judging this Sprint?

Review “Jailbreaking general purpose robots”

Your public critique appears on the project page without your name. Reviews of strong projects are shared with funders, as you choose below.

Not shown on the project page.

Shown on the project page, without your name.

Only the Apart team reads this, and funders if you agree below.

Decline to score

Only when the quality of the writing makes the work impossible to follow. Say why in your private critique; the project page shows only that a judge declined, not why.

Sharing your name *

When we share a strong project with funders, your name, scores and public critique go with it, confidentially; this choice is only about whether your name is public. If you think this project deserves funding, please also endorse it: that carries the most weight.

Share my private critique with funders *

See our Privacy Policy.

No public critique yet.

Cite this project

@misc{backlund2024jailbreaking,
  title = {{Jailbreaking general purpose robots}},
  author = {Axel Backlund and Lukas Petersson},
  year = {2024},
  month = sep,
  note = {Submitted to Hackathon for Technical AI Safety Startups, an Apart Research Sprint},
  howpublished = {\url{https://apartresearch.com/sprints/projects/jailbreaking-general-purpose-robots}},
  url = {https://apartresearch.com/sprints/projects/jailbreaking-general-purpose-robots}
}

Build something like this at the next Sprint

Swarm Alignment Hackathon · Nov 6 - 8, 2026